A growing company frequently hires, transfers, and promotes staff. The security team is overwhelmed because they must manually adjust individual user permissions each time someone changes positions, and errors keep occurring. Management wants an access control approach where permissions are tied to job functions so that assigning a person to a position automatically grants the correct access. Which access control model best meets this requirement?